Common use of Special Categories of Personal Data Clause in Contracts

Special Categories of Personal Data. Data Controller may submit Special Categories of Personal Data to the Subscription Service, the extent of which is solely determined by Data Controller in compliance with Data Protection Law, and may include the following categories, if any: • racial or ethnic origin; • political opinions; • religious or philosophical beliefs; • trade union membership; • genetic data or biometric data; • health information; and • sex life or sexual orientation. Processing Operations The personal data transferred will be subject to the following basic processing activities: • All activities necessary for the performance of the Agreement. EXHIBIT A.5 - DATA SECURITY GUIDE This Data Security Guide forms a part of the Agreement and describes the measures ServiceNow takes to protect Customer Data. In the event of any conflict between the terms of this Data Security Guide and the terms of the Agreement with respect to the subject matter herein, this Data Security Guide shall control. All capitalized terms not defined in this Data Security Guide will have the meaning given to them in other parts of the Agreement.

Special Categories of Personal Data. Data Controller may submit Special Categories of Personal Data to the Subscription Service, the extent of which is solely determined by Data Controller in compliance with Data Protection Law, and may include the following categories, if any: • ∙ racial or ethnic origin; • political opinions; • ∙ religious or philosophical beliefs; • ∙ trade union membership; • ∙ genetic data or biometric data; • ∙ health information; and • ∙ sex life or sexual orientation. Processing Operations The personal data transferred will be subject to the following basic processing activities: • ∙ All activities necessary for the performance of the Agreement. EXHIBIT A.5 - DATA SECURITY GUIDE This Data Security Guide forms a part of the Agreement and describes the measures ServiceNow Kensu takes to protect Customer Data. In the event of any conflict between the terms of this Data Security Guide and the terms of the Agreement with respect to the subject matter herein, this Data Security Guide shall control. All capitalized terms not defined in this Data Security Guide will have the meaning given to them in other parts of the Agreement.

Special Categories of Personal Data. Data Controller may submit Special Categories of Personal Data to the Subscription Service, the extent of which is solely determined by Data Controller in compliance with Data Protection Law, and may include the following categories, if any: • racial or ethnic origin; • political opinions; • religious or philosophical beliefs; • trade union membership; • genetic data or biometric data; • health information; and • sex life or sexual orientation. Processing Operations The personal data transferred will be subject to the following basic processing activities: • All activities necessary for the performance of the Agreement. EXHIBIT A.5 - Data Processing Addendum DATA SECURITY GUIDE This Data Security Guide forms a part of the Agreement and describes the measures ServiceNow takes to protect Customer Data. In the event of any conflict between the terms of this Data Security Guide and the terms of the Agreement with respect to the subject matter herein, this Data Security Guide shall control. All capitalized terms not defined in this Data Security Guide will have the meaning given to them in other parts of the Agreement.

Special Categories of Personal Data. Data Controller may submit Special Categories of Personal Data to the Subscription Service, the extent of which is solely determined by Data Controller in compliance with Data Protection Law, and may include the following categories, if any: • racial or ethnic origin; • political opinions; • religious or philosophical beliefs; • trade union membership; • genetic data or biometric data; • health information; and • sex life or sexual orientation. Processing Operations The personal data transferred will be subject to the following basic processing activities: • All activities necessary for the performance of the Agreement. EXHIBIT A.5 - DATA PROCESSING ADDENDUM DATA SECURITY GUIDE This Data Security Guide forms a part of the Agreement and describes the measures ServiceNow takes to protect Customer Data. In the event of any conflict between the terms of this Data Security Guide and the terms of the Agreement with respect to the subject matter herein, this Data Security Guide shall control. All capitalized terms not defined in this Data Security Guide will have the meaning given to them in other parts of the Agreement.

Special Categories of Personal Data. Data Controller may submit Special Categories of Personal Data to the Subscription Service, the extent of which is solely determined by Data Controller in compliance with Data Protection Law, and may include the following categories, if any: • racial or ethnic origin; • political opinions; • religious or philosophical beliefs; • trade union membership; • genetic data or biometric data; • health information; and • sex life or sexual orientation. Processing Operations The personal data transferred will be subject to the following basic processing activities: • All activities necessary for the performance of the Agreement. EXHIBIT A.5 - DATA PROCESSING ADDENDUM DATA SECURITY GUIDE This Data Security Guide forms a part of the Agreement and describes the measures ServiceNow takes to protect Customer Data. In the event This Data Security Guide forms a part of any conflict between the terms of legal agreement into which this Data Security Guide is explicitly incorporated by reference (the “Agreement”) and is subject to the terms of the Agreement with respect to the subject matter herein, this Data Security Guide shall controlAgreement. All capitalized Capitalized terms not otherwise defined in this Data Security Guide will have the meaning given to them in other parts of the Agreement.